Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json)
Hash identifier: KzQ6a60l5smYv2VrELriuip07LCPrxwA5E0NE1hXgjY=
Subject key identifier: DB:A4:0B:A6:FE:09:F9:55:5F:6A:6A:D8:1E:3B:51:41:80:14:51:E2
Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Certificate serial: 0480
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
Manifest number: 0479
Signing time: Fri 28 Mar 2025 17:32:41 +0000
Manifest this update: Fri 28 Mar 2025 17:32:41 +0000
Manifest next update: Fri 04 Apr 2025 17:32:41 +0000
Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: tShhLXGrRmMVF+rG0hVQu3sXqBWT0AJ9SwHcPLSuADU=)
2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: 7V54SxSgQ+SNaGeYZDWb9OGgqMLMcejVc584VWscbyA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6
Validity
Not Before: Mar 28 17:32:41 2025 GMT
Not After : Apr 4 17:32:41 2025 GMT
Subject: CN=67e6dd39-ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:2f:49:5d:cc:ad:bc:32:26:e3:9c:0b:0e:
84:f5:f1:3b:88:e7:43:6b:51:a3:49:5b:9a:d0:81:
bb:ed:0d:d1:c3:50:1d:3e:5b:ec:2f:c7:cd:51:ba:
c4:e3:03:2a:9c:89:76:3e:3f:45:c4:e6:fc:e6:00:
84:ff:ec:8d:db:53:16:08:05:40:01:aa:4d:30:93:
01:76:d7:31:11:9d:9d:57:c7:74:5b:24:9b:ed:42:
b5:ff:fd:a8:ce:a2:86:ad:76:92:3e:24:bf:b7:95:
b7:48:75:01:81:42:69:63:f2:28:0e:0b:72:53:29:
c0:5f:82:be:60:bf:41:c0:bf:f0:2a:b3:77:b2:a7:
8b:73:3b:1d:fb:fa:6e:11:f4:29:0d:5d:d2:3b:2f:
5b:d9:59:dc:80:bf:54:c6:f2:b4:8c:a4:79:03:1c:
df:6c:a6:5b:9a:76:66:f0:aa:4e:75:c0:e3:09:c4:
89:85:52:60:a8:4a:f1:2c:98:32:3c:7b:b2:19:8a:
92:b0:4e:3f:b5:9f:c9:84:52:ba:ba:2d:21:c4:a4:
4f:b5:c2:d3:0e:a8:f5:38:1a:b4:58:5a:57:cb:46:
f5:3f:85:a6:22:a2:67:6e:38:42:a6:03:bb:80:29:
f7:62:df:15:ee:31:6e:c4:71:1a:31:e6:86:77:23:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A4:0B:A6:FE:09:F9:55:5F:6A:6A:D8:1E:3B:51:41:80:14:51:E2
X509v3 Authority Key Identifier:
keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:0a:cf:96:17:74:99:6e:b6:34:a0:04:ef:4d:00:3a:a0:10:
7e:18:44:50:24:2c:1e:05:96:b5:b0:e7:0f:19:50:cc:52:27:
27:e9:e8:b9:c3:03:e2:e9:e3:b5:fe:f7:f8:be:d6:d1:ca:1f:
4c:18:62:e0:e8:8c:82:43:08:c2:77:7b:29:9a:12:82:77:5e:
ec:b1:67:7e:d1:8c:60:85:68:db:17:93:7c:6e:ae:f4:2f:a3:
5c:9f:b5:5f:4e:b2:8d:f0:54:f8:b4:5d:cb:07:ca:60:97:d0:
3c:8b:c9:1a:95:84:3e:c0:a3:fa:cc:1c:57:00:2a:12:8b:e2:
ee:cf:88:90:0b:ef:f0:fe:16:b6:89:f1:f4:dc:c2:95:5d:dc:
dd:c4:cf:e1:5d:e6:34:19:9a:91:2b:82:0f:ba:63:b2:94:64:
f5:c5:b0:cc:fe:41:e6:9a:dc:99:8b:bd:c4:ee:72:d4:96:f6:
51:d5:12:1a:30:15:e6:17:0a:e0:7b:c0:7b:ea:a0:46:f7:96:
ec:7c:23:ab:2b:9f:ba:50:51:b7:4f:41:07:cf:a8:30:93:53:
49:90:b5:b1:55:b2:0b:8e:44:d2:65:2c:c1:bc:c0:12:d2:f3:
d8:75:f1:13:2b:25:50:11:a7:89:39:60:31:f9:ff:9c:d3:2b:
7a:68:ee:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1
RTY2MEZFQTUwHhcNMjUwMzI4MTczMjQxWhcNMjUwNDA0MTczMjQxWjAYMRYwFAYD
VQQDEw02N2U2ZGQzOS1jY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1UvSV3MrbwyJuOcCw6E9fE7iOdDa1GjSVua0IG77Q3Rw1AdPlvsL8fNUbrE
4wMqnIl2Pj9FxOb85gCE/+yN21MWCAVAAapNMJMBdtcxEZ2dV8d0WySb7UK1//2o
zqKGrXaSPiS/t5W3SHUBgUJpY/IoDgtyUynAX4K+YL9BwL/wKrN3sqeLczsd+/pu
EfQpDV3SOy9b2VncgL9UxvK0jKR5AxzfbKZbmnZm8KpOdcDjCcSJhVJgqErxLJgy
PHuyGYqSsE4/tZ/JhFK6ui0hxKRPtcLTDqj1OBq0WFpXy0b1P4WmIqJnbjhCpgO7
gCn3Yt8V7jFuxHEaMeaGdyP10QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNukC6b+
CflVX2pq2B47UUGAFFHiMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE
M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6
dWRUbjhWWFRwNDVlWmdfcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxCs+WF3SZbrY0oATvTQA6oBB+GERQJCweBZa1sOcPGVDMUicn6ei5
wwPi6eO1/vf4vtbRyh9MGGLg6IyCQwjCd3spmhKCd17ssWd+0YxghWjbF5N8bq70
L6Ncn7VfTrKN8FT4tF3LB8pgl9A8i8kalYQ+wKP6zBxXACoSi+Luz4iQC+/w/ha2
ifH03MKVXdzdxM/hXeY0GZqRK4IPumOylGT1xbDM/kHmmtyZi73E7nLUlvZR1RIa
MBXmFwrge8B76qBG95bsfCOrK5+6UFG3T0EHz6gwk1NJkLWxVbILjkTSZSzBvMAS
0vPYdfETKyVQEaeJOWAx+f+c0yt6aO6P
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:32 2025 by rpki-client